News for hackers. Stuff that matters.

A comment on Don’t Get Clever with Login Forms. Parent comment

Re:Don’t Get Clever with Login Forms by saagarjha on Friday February 15, 2019 @02:21PM (#19173857)
This is not necessarily true. iOS, for example, does not allow for key logging but will happily allow Facebook to grab whatever you have on your clipboard, which it does of course because it's Facebook.
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by pmjordan on Friday February 15, 2019 @03:18PM (#19174335)
I think I've spotted iOS clearing the clipboard if you task-switch after pasting the contents into a password input field. Which is presumably precisely to defend against this kind of data theft.
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by saagarjha on Saturday February 16, 2019 @05:43AM (#19178077)
Huh, this must be new. I'll look into it; it's nice to hear that this security loophole is at least partially fixed!
[ Parent | on HN ]